信息安全事件标准化是信息安全保障体系的重要组成部分。本文对信息安全事件的数据源进行了分析,基于IDMEF标准,提出了信息安全事件的标准化模型,基于XML语言给出了信息安全事件的数据表示、创建和存储方法,对分析、解决不同类型信息系统、安全产品的安全事件标准化问题具有指导意义。 Standardization of information security incidents is an important part of information security system. Based on the standard of IDMEF, this paper presents a standardized model of information security incidents, and presents the data representation, creation and storage methods of information security incidents based on XML language, and analyzes the data sources of different types of information System, safety product safety standardization of the incident has guiding significance.